Skip to content
Board and Sorcery
Join the list

Privacy Policy

Last updated: 2 October 2026

This policy explains what personal data Board and Sorcery collects through boardandsorcery.com, including the pages and tools for our brands Pencil Links and QUAD, why we collect it, and what rights you have. In short, we collect as little as we can and we never sell it.

Who is responsible for your data

The controller of the personal data described here is Tim Campbell, trading as Board and Sorcery, established and operating in Finland.

Postal address: 10A Russell St, Brunswick VIC 3056, Australia
Email: Hello@boardandsorcery.com

What we collect

When you join our mailing list

Your email address, and a record of when and how you signed up. You join the list through a sign-up form or when you download a free PDF from the Pencil Links course builder. Each time we ask you to tick a box first. We use your email only to send you Board and Sorcery news, such as new games, books, events and playtests. We don't email much!

When you email us

Your email address, your name if you include it, and whatever you choose to tell us. We use it to reply to you and handle your request.

When you visit the site

Like almost every website, our hosting server automatically records basic technical details for each visit in its logs: your IP address, browser type, the page you asked for, the page that referred you, and the date and time. These logs are used to keep the site running and secure, and to spot abuse. We don't use them to identify you or build a profile of you.

The short link printed in the Pencil Links book (boardandsorcery.com/pl) adds a campaign tag to the web address, so we can count how many visits come from the book. The tag says nothing about who you are.

What we don't collect

There are no user accounts, no payments, no comments and no analytics or advertising trackers on this site.

Cookies and local storage

This site doesn't set cookies for tracking, advertising or analytics, which is why you won't see a cookie banner. Our fonts and images are served from our own server, so loading a page doesn't send your details to Google Fonts or any other outside service.

The Pencil Links scorecard and course builder save your scores, player names and hole designs in your browser's local storage. That data stays on your device, is never sent to us, and is there only so your scores and designs are still there when you come back. You can delete it with the "Clear" buttons or by clearing your browser data.

If we ever add analytics or other optional cookies, we'll update this policy first and ask for your consent where the law requires it.

Our legal reasons for using your data

  • Consent: for our mailing list. You can withdraw consent at any time using the unsubscribe link in any email, or by emailing us.
  • Legitimate interests: for answering your emails and for keeping server logs to run and protect the site.
  • Contract: if you arrange to buy something from us by email, to deliver it.
  • Legal obligation: where we have to keep records by law, such as sales records.

Who we share it with

We don't sell or rent your personal data, and we don't share it for advertising. We only share it with service providers that help us run Board and Sorcery, under contracts that require them to protect it:

  • Hostinger (Lithuania, EU): hosts this website and its server logs.
  • Brevo (France, EU): stores our mailing list and sends our newsletter.
  • Our email provider: stores emails you send us.

When you follow a link from our site to Amazon, YouTube, quadgame.online or a social network, that site's own privacy policy applies to what happens there.

QUAD

QUAD is played at quadgame.online, a separate site with its own leaderboard. The privacy notice on that site covers what the game collects when you play.

We will disclose information if the law requires it, for example to comply with a court order or a legal request from a government authority, or where we believe in good faith that disclosure is needed to protect our rights, protect your safety or the safety of others, or investigate fraud.

International transfers

We choose providers that store data in the European Union where we can. If one of our providers handles your data outside the EU/EEA or the UK, we make sure there's a lawful safeguard in place, such as the European Commission's Standard Contractual Clauses or, for US companies, certification under the EU-US Data Privacy Framework.

How long we keep it

  • Mailing list: until you unsubscribe or ask us to remove you. We may keep a record of your unsubscribe so we don't email you again by mistake.
  • Emails: as long as we need to deal with your request and any follow-up, then we delete them.
  • Server logs: kept for a short time by our host for security and troubleshooting, then deleted automatically.
  • Sales records: for as long as tax and accounting laws require.

Automated decisions

We don't make any decisions about you using automated processing, profiling or AI.

Your rights

If you're in the European Union, EEA or UK, you have the following rights over your personal data:

  • the right to be informed;
  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restrict processing;
  • the right to data portability;
  • the right to object;
  • rights in relation to automated decision-making and profiling;
  • the right to withdraw consent at any time, without affecting anything we did before you withdrew it.

To use any of these rights, email Hello@boardandsorcery.com. We'll reply within one month and won't charge you. We may need to confirm who you are first.

You also have the right to complain to a data protection authority, usually in the country where you live or work, or where you think a problem happened. Because we're established in Finland, our lead authority is the Data Protection Ombudsman (tietosuoja.fi). In the UK it's the Information Commissioner's Office. We'd appreciate the chance to sort things out with you first.

If you're in Australia, you can ask to access or correct the personal information we hold about you by emailing us. If you're unhappy with how we handle it, you can contact the Office of the Australian Information Commissioner. Wherever you live, we're happy to honour the same requests.

Children

Our games suit younger players, but this website doesn't knowingly collect personal data from children. If you're under 16, please ask a parent or guardian before joining our mailing list or emailing us. If you think a child has given us their details, tell us and we'll delete them.

Keeping your data safe

The site is served over an encrypted connection (HTTPS), and we use reputable providers with appropriate security. We keep reasonable administrative, technical and physical safeguards to protect against unauthorised access, use, modification and disclosure of personal data in our control. However, no transmission over the internet or a wireless network can be guaranteed to be completely secure.

Changes to this policy

We'll update this policy when our practices change, for example if we add a shop or analytics. The date at the top of this page shows when it last changed.

Contact

For anything about your personal data or this policy, email Hello@boardandsorcery.com.